Loading story…
CVE-2022-45887 is a memory-leak flaw in the Linux kernel's TTUSB-DEC USB media driver, caused by ttusb_dec_exit_dvb() unregistering a DVB frontend without calling dvb_frontend_detach(). A local low-privileged user who can repeatedly connect and disconnect an affected device could exhaust kernel memory and cause a denial of service. The issue affects kernel versions through 6.0.9 and is classified as CWE-401; Red Hat rates it Moderate with a CVSS v3.1 score of 4.7.
Upstream corrected the cleanup path in commit 517a28133832 by using dvb_frontend_detach(dec->fe), allowing the frontend to be freed properly; Fedora received the fix in stable kernel 6.3.7. Red Hat issued fixes for affected RHEL 8 kernel variants, including 8.6 and 8.8 Extended Update Support, and relevant Red Hat Virtualization 4 deployments; RHEL 9 is unaffected. Organizations unable to patch can reduce exposure by blacklisting the ttusb_dec kernel module.
See affected versions and whether adversaries are exploiting it.
6 events from the most recent confirmed update back to the earliest known activity.
Red Hat issued RHSA-2023:6901 for RHEL 8 kernel-rt and RHSA-2023:7077 for the RHEL 8 kernel to address CVE-2022-45887.
Guilherme de Almeida Suckevicz reported the TTUSB-DEC driver memory-leak issue, later tracked as CVE-2022-45887.
Hyunwoo Kim submitted a Linux kernel patch that changes the TTUSB-DEC driver's disconnect cleanup to call dvb_frontend_detach(), preventing the memory leak caused by repeated device connections and disconnections.
Red Hat issued RHSA-2024:1404 to address CVE-2022-45887 in the Red Hat Enterprise Linux 8.8 Extended Update Support kernel.
Red Hat issued RHSA-2024:0724 to fix CVE-2022-45887 in the RHEL 8.6 Extended Update Support kernel and Red Hat Virtualization 4 for RHEL 8.
The upstream Linux kernel incorporated the fix as commit 517a28133832, with the issue fixed in kernel 6.4-rc3; Fedora also fixed it in stable kernel version 6.3.7.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
3 references tracked. Mallory keeps watching after this page renders.
bugzilla.redhat.com
Open sourceredhat.com
Open sourcelore.kernel.org
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
**CVE-2019-19533** is an information-disclosure vulnerability in the Linux kernel's `ttusb-dec` USB media driver. A malicious USB device could trigger `ttusb_dec_send_command()` to transmit uninitialized kernel memory because the driver allocated its command buffer with `kmalloc()` and did not initialize every byte before passing it to `usb_bulk_msg()`. The affected code is in `drivers/media/usb/ttusb-dec/ttusb_dec.c` and impacts Linux kernels before version 5.3.4. Upstream commit `a10feaf8c464` remediates the issue by replacing `kmalloc()` with zero-initializing `kzalloc()`, preventing residual kernel-memory contents from being sent to the connected USB device.
Aug 28, 2026
**CVE-2023-28328** affects the Linux kernel's AZ6027 USB DVB media-driver I2C transfer routine, `az6027_i2c_xfer()`. A local low-privileged user can submit a crafted I2C message—such as address `0x99` with zero length and a NULL buffer—causing the driver to dereference `msg[i].buf[0]` and crash the kernel. The defect was found through kernel fuzzing, which reproduced a KASAN-detected general-protection fault through the `I2C_RDWR` ioctl path. The upstream fix validates that the I2C message length is at least one before accessing its buffer and returns `-EOPNOTSUPP` for invalid requests. Red Hat rated the issue Moderate with CVSS 3.1 score 5.5, released fixes for affected RHEL 8 kernel streams, and stated that RHEL 9 is unaffected. Until patched, administrators can reduce exposure by blacklisting the `dvb_usb_az6027` kernel module where the associated hardware is not required.
Aug 26, 2026
**CVE-2022-41218** is a medium-severity use-after-free flaw in the Linux kernel's `dvb-core` subsystem, affecting Digital Video Broadcasting devices. A local low-privileged attacker could race malicious code against removal of a USB DVB demultiplexer or similar device, causing freed memory in `drivers/media/dvb-core/dmxdev.c` to be accessed. Successful exploitation could crash the host or potentially elevate privileges, although Red Hat rated the issue CVSS 5.5 because physical device removal and a difficult-to-win race condition are required. Kernel developers identified related DVB frontend, network, and device-registration races involving concurrent open, close, and USB-disconnect operations; KASAN reproduced the use-after-free conditions on Linux 6.1.0-rc2 and later. Fedora shipped a fix in kernel 6.0.18 stable updates, while Red Hat remediated affected RHEL 8 `kernel` and `kernel-rt` packages through RHSA-2023:2736 and RHSA-2023:2951, with subsequent coverage for RHEL 8.6 EUS and Red Hat Virtualization 4. Organizations unable to patch can mitigate exposure by preventing the `dvb-core` module from loading; RHEL 9 `kernel-rt` was marked will not fix.
Aug 26, 2026